SQLcl 22.1 CodeScan -more info please

Mike Kutz · Apr 7, 2022 11:50AM

I just got a news article (by @thatJeffSmith-Oracle ) announcing SQLcl v22.1 and some of its new features.

The most interesting one (to me) is the CodeScan feature.

I believe I had mentioned my desire to have the "custom highlighting" feature enhanced for such "code sniffing" capabilities.

With that: Thank You for adding this feature.

(image from email)

I'm assuming the blog on this feature is "coming soon".

I have some questions regarding this feature that might not show up in the blog:

Which "_slow=true" programming styles are detected?
Can we modify that list?
- turn certain checks on/off
- create our own
Will this feature be ported to SQL Developer?
10g CBO converts (certain) loops into Bulk Collect-FORALL. Is there a way for the engine to suggest the same? (eg here is some potentially "_slow=true" code, here is a suggested improved version - but this may be a better feature for SQL Developer)

oh ..

thanks,

MK

thatJeffSmith-Oracle · Apr 7, 2022 12:05PM

It's all or nothing with that switch.

Yes, it will be available in SQL Developer for next update, just like we already have the SQL Injection Detection code there.

You can find the rules we are using here

thatJeffSmith-Oracle · Apr 7, 2022 12:05PM

It's all or nothing with that switch.

Yes, it will be available in SQL Developer for next update, just like we already have the SQL Injection Detection code there.

You can find the rules we are using here

User_H3J7U · Apr 7, 2022 12:42PM

This statement is true only for a unique key on book_languages.language.

Mike Kutz · Apr 7, 2022 1:22PM

Data Security Predicates Wrapped Inside Redundant Sub-Query

How does this relate to and VPD/RLS/RAS?

SPEAKING OF RAS ...

I see the chapter "PGQL Plug-in for SQLcl" in that Document.

Can we get a plug-in for RAS objects? (Security Classes, ACLs, Policies, etc)

I've written a Proof-of-Concept ("RAS-SQL to PL/SQL") code that works for some cases.

I'm finding it easier to describe my objects/review security policies this way.

Forum Stats